On 21/01/15 14:56, Edwin Mons wrote: > On 21/01/15 10:17, Skhaen wrote: >> Ah, good news! >> >> Can you update it to pass to B if it's not only PFS please? > That's reason for A- at ssllabs, not B. Pressed send too quickly... Meant to add: And only if no FS cyphers are supported. No downgrade if you support both FS and non-FS. Edwin